ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 781:

  Which of the following media is LEAST problematic with data remanence?

  A. Dynamic Random Access Memory (DRAM)
  B. Electrically Erasable Programming Read-Only Memory (BPRCM)
  C. Flash memory
  D. Magnetic disk
  A. Dynamic Random Access Memory (DRAM)

• Question 782:

  A company seizes a mobile device suspected of being used in committing fraud. What would be the BEST method used by a forensic examiner to isolate the powered-on device from the network and preserve the evidence?

  A. Put the device in airplane mode
  B. Suspend the account with the telecommunication provider
  C. Remove the SIM card
  D. Turn the device off
  A. Put the device in airplane mode

• Question 783:

  During the Security Assessment and Authorization process, what is the PRIMARY purpose for conducting a hardware and software inventory?

  A. Calculate the value of assets being accredited.
  B. Create a list to include in the Security Assessment and Authorization package.
  C. Identify obsolete hardware and software.
  D. Define the boundaries of the information system.
  A. Calculate the value of assets being accredited.

• Question 784:

  The BEST example of the concept of "something that a user has" when providing an authorized user access to a computing system is

  A. the user's hand geometry.
  B. a credential stored in a token.
  C. a passphrase.
  D. the user's face.
  B. a credential stored in a token.

• Question 785:

  A security professional determines that a number of outsourcing contracts inherited from a previous merger do not adhere to the current security requirements. Which of the following BEST minimize s the risk of this happening again?

  A. Define additional security controls directly after the merger
  B. Include a procurement officer in the merger team
  C. Verify all contracts before a merger occurs
  D. Assign a compliancy officer to review the merger conditions
  D. Assign a compliancy officer to review the merger conditions

• Question 786:

  Which of the following BEST describes Recovery Time Objective (RTO)?

  A. Time of data validation after disaster
  B. Time of data restoration from backup after disaster
  C. Time of application resumption after disaster
  D. Time of application verification after disaster
  C. Time of application resumption after disaster

• Question 787:

  DRAG DROP

  Match the objectives to the assessment questions in the governance domain of Software Assurance Maturity Model (SAMM).

  Select and Place:

  

  

• Question 788:

  A security consultant has been asked to research an organization's legal obligations to protect privacy-related information. What kind of reading material is MOST relevant to this project?

  A. The organization's current security policies concerning privacy issues
  B. Privacy-related regulations enforced by governing bodies applicable to the organization
  C. Privacy best practices published by recognized security standards organizations
  D. Organizational procedures designed to protect privacy information
  B. Privacy-related regulations enforced by governing bodies applicable to the organization

• Question 789:

  In a data classification scheme, the data is owned by the

  A. Information Technology (IT) managers.
  B. business managers.
  C. end users.
  D. system security managers.
  B. business managers.

• Question 790:

  When conducting a forensic criminal investigation on a computer had drive, what should be dene PRIOR to analysis?

  A. Create a backup copy of all the important files on the drive.
  B. Power off the computer and wait for assistance.
  C. Create a forensic image of the hard drive.
  D. Install forensic analysis software.
  C. Create a forensic image of the hard drive.